CFE-Computing
Menu

Privacy policy

This is a translation for convenience. Only the German version is legally binding.

This policy explains which personal data is processed when you visit this website, use the contact form or contact us by email. It follows Art. 13 of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

Controller

CFE-Computing GmbH
Umdaschstraße 18/5
4070 Eferding
Austria
Email: office@cfe-computing.at
Phone: +43 660 1498459

In short

1. Visiting the website (server logs)

When you open a page, your browser transmits technically necessary data to our server. For each request the server logs:

Requests to cfe-computing.eu and cfe-computing.com are redirected to cfe-computing.at and logged in the same way. Submitting the contact form also appears as a request in the log, but the form content does not.

Purpose: delivering the website, server security (detecting and preventing attacks and abuse) and troubleshooting.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the secure and stable operation of the website.

Retention: Logs are rotated weekly and deleted automatically, so entries are kept for at most about five weeks. If a security incident is detected, we keep the affected entries until the incident has been resolved.

Hosting: We use Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany, as our processor (Art. 28 GDPR). The server is located in a data centre in Nuremberg, Germany. No data is transferred to countries outside the EU in this context.

2. Contact form

You can send us an enquiry using the form on the “Contact” page. We process:

A small form service on our server receives the enquiry and immediately forwards it as an email to office@cfe-computing.at. Your email address is set as the reply-to address so that we can answer you directly. The form service does not store the enquiry. It only counts that an enquiry was received, without its content. You will not receive an automatic reply or copy by email.

Abuse protection: To prevent mass abuse of the form, the form service limits the number of requests per IP address. For this purpose the IP address is held only in memory, for no longer than one hour, and is not written to disk. A field that is invisible to humans helps detect automated spam submissions.

Purpose: handling and answering your enquiry; protecting the form against abuse.

Legal basis: Art. 6(1)(b) GDPR if your enquiry relates to a contract or a quotation. Otherwise Art. 6(1)(f) GDPR; our legitimate interest is to answer enquiries. The per-IP limit is based on Art. 6(1)(f) GDPR; our legitimate interest is a working form protected against spam.

Delivery via Brevo: We use the Brevo service as our processor (Art. 28 GDPR) to send the email generated by the form to our mailbox: Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, a subsidiary of Sendinblue SAS, Paris, France. Brevo processes the message in order to deliver it and keeps delivery logs for that purpose. Delivery logs and previews are deleted at Brevo after one month. Brevo stores data in data centres in the EU. Brevo uses sub-processors, including group companies and service providers outside the EU (for example in the USA and India), which may have access to data in individual cases. For these transfers Brevo relies on EU standard contractual clauses (Art. 46(2)(c) GDPR) or, for certified recipients in the USA, on the adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR).

Tracking pixel: For technical reasons Brevo adds an invisible image (tracking pixel) to the email sent to our mailbox, through which Brevo registers that the email was opened. It is only requested when we open the email on our own devices. Your device is not involved.

Retention and mailbox: as for emails, see section 3.

3. Contact by email

If you write to office@cfe-computing.at or use the contact form, we process your email address, your name, the information you provide in your message and the technical email headers.

Purpose: handling and answering your enquiry.

Legal basis: Art. 6(1)(b) GDPR if your enquiry relates to a contract or a quotation. Otherwise Art. 6(1)(f) GDPR; our legitimate interest is to answer enquiries.

Retention: Enquiries that do not lead to a business relationship are deleted no later than 12 months after the last contact. If a business relationship arises, we keep business correspondence for seven years (section 212 Austrian Commercial Code, UGB).

Email service: We use Zoho as our processor (Art. 28 GDPR) for our mailbox. Emails are stored in data centres in the EU (Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands). According to Zoho, data may in rare cases be accessed from India for technical support. For this case Zoho has agreed EU standard contractual clauses (Art. 46(2)(c) GDPR).

This website contains links to third-party websites. No data is transferred to them until you click a link. The operator of the third-party website is responsible for processing on that website.

5. No obligation to provide data, no automated decisions

You are not obliged to provide us with any data. Without the technically necessary data (section 1), however, the website cannot be delivered, and without name, email address and message we cannot answer an enquiry sent through the form. There is no automated decision-making or profiling (Art. 22 GDPR).

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20).

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

An email to office@cfe-computing.at is sufficient for any request.

Right to lodge a complaint: You may lodge a complaint with the Austrian Data Protection Authority (Art. 77 GDPR, section 24 DSG): Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, Austria, dsb@dsb.gv.at, www.dsb.gv.at